#VU102981 Resource management error in Linux kernel - CVE-2025-21629

Vulnerability identifier: #VU102981

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-21629

CWE-ID: CWE-399

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the skb_csum_hwoffload_help() function in net/core/dev.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/68e068cabd2c6c533ef934c2e5151609cf6ecc6d
https://git.kernel.org/stable/c/95ccf006bbc8b59044313b8c309dcf29c546abd4
https://git.kernel.org/stable/c/ac9cfef69565021c9e1022a493a9c40b03e2caf9
https://git.kernel.org/stable/c/d3b7a9c7597b779039a51d7b34116fbe424bf2b7

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.